mayar-v2
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill frequently uses
npx -y mayar@latestto execute the official Mayar CLI tool directly from the NPM registry. This ensures the agent uses the most up-to-date version of the vendor's tooling.\n- [COMMAND_EXECUTION]: Executes shell commands using themayarCLI for administrative tasks and integration setup, such as checking account status (whoami), registering webhooks, and fetching API documentation.\n- [DATA_EXFILTRATION]: Network operations are restricted to official Mayar domains (api.mayar.idandapi.mayar.club) for payment processing and account management.\n- [CREDENTIALS_UNSAFE]: Appropriately manages sensitive credentials by instructing the user to store theMAYAR_API_KEYin environment variables (.env) and verifying it via the CLI, rather than hardcoding secrets.
Audit Metadata